2023 Question week 1 Security Policy graded Policy is central to affecting security in organizations Using

Questionweek 1

Security Policy (graded)

Policy is central to affecting security in organizations. Using the security policy for your workplace (or other organization with which you are familiar), what are some key features that allow personnel to control security? Are there any deficiencies? What can be added that would improve security?

Security CBK (graded)

The security Common Body of Knowledge (CBK) describes what security professionals collectively know about the discipline. What knowledge domains are included in the CBK? What do you think will be added to the CBK in the future?

This section lists options that can be used to view responses.

week 2

Compliance Legislation (HIPAA) (graded)

How can we utilize the four types of security policies to develop a HIPAA security program for organizations? What kinds of information does HIPAA protect? What kinds of organizations does HIPAA cover?

Intellectual Property (IP) (graded)

Your organization has asked you to assist in the discussion about how to best protect its intellectual property (IP). The engineers in your organization have developed new database and ordering software to support a faster process for fulfilling customer orders. Which of the various forms of IP protection will you recommend for safeguarding the engineers’ work? Should it be protected at all? What does the organization risk by getting IP protection?

week 3

Snack Cake Security (graded)

Your company has a special recipe for snack cakes. This snack cake is a key product in your company’s lineup, and it is responsible for a large majority of shareholder value. Using a security model described in the text, describ

Security and the OSI Model (graded)

Security can have a cumulative effect. Consider the OSI model as a key component of the Common Body of Knowledge. For definitions of OSI layers, click here: OSI Layers. What is the OSI model about, and how can we use it when we are selecting security controls?
e an approach that will allow this important recipe to be kept secure.

week 4

Amusement Security (graded)

Your company is in the business of entertainment; they run an amusement park. There are thousands of people all over the park every day. It is very important to control who has access to what, and not just for visitors, but for employees as well. Define groups of people, and indicate how you would control physical access for them.

Security Operations Changes (graded)

Describe how to insert changes in the operational security of the organization. How do you manage those who do not want to accept the changes?

This section lists options that can be used to view responses.

week 5

Backup and Recovery Planning (graded)

Why are backups so often overlooked in an organization? How do we sell the benefits of spending money on backup solutions to business managers and executives?

Access Control Lists (graded)

Access control lists are very valuable for administering granular control over an organization’s resources. So why do a lot of organizations opt not to use them in lieu of more general super user or administrator accounts?

week 6

Cryptograhy (graded)

Which algorithm is more secure: AES256 or AES128? Why?

The Enterprise Firewall is Dead (graded)

A popular computer network publication stated at one time that the enterprise firewall was dead. It boldly stated that the exterior firewalls of the organization should be torn down and replaced with host-based firewalls instead. Is this insane, or is it the best new practice in security management? Explain your answer.

This section lists options that can be used to view responses.

 

Intrusion Detection (graded)

Your organization’s business manager has read an article about how intrusion detection systems can help deter hackers. He or she wants to spearhead a campaign to deploy them around the company’s locations in three states. Since an IDS can help deter hackers, does this make it a worthwhile project, or is there some reason to be wary? Specific to this example, how do you respond to ad hoc security requests like this? In general, how can you keep requests like this in check

Secure as a Car (graded)

Engineering software is like engineering a car; if one were so inclined, there could be a completely bug- and security-free application. Do you agree with this? Why or why not?

 

00:00

Role

You are the IT Services manager for Sunshine Machine Works. You are to assess the information presented and provide a response to management on how remote access may be handled for Sunshine Machine Works.00:00

Players

StoneChief Executive Officer Margie NelsonChief Financial Officer GarThomasGeneral Manager

Deliverable

Given the scenario, your role and the information provided by the key players involved, it is time for you to make a decision.<br><br>If you are finished reviewing this scenario, close this window and return to this Week’s You Decide tab, in eCollege, to complete the activity for this scenario.<br><br>You can return and review this scenario again at any time.

YOUDECIDE

Activity

Assignment

Since you are responsible for IT Services and want to keep the systems and network functioning effectively, you will want to provide technical guidance and leadership on this issue. Follow the instructions provided in the You Decide Exercise: Cryptographic Tunneling and the OSI Model. Write a paper consisting of 500-1,000 words (double-spaced) on the security effects of cryptographic tunneling based on an understanding of the OSI (Open Systems Interconnect) model. Review the OSI Simulation in the week 3 lecture. Provide input on the type of cryptographic tunneling protocols (e.g., L2TP, IPSEC, SSL, etc.) which may be used, the layer(s) of the OSI at which each operates, and also recommend how they may be implemented. Cryptographic tunneling is inherent in building any common virtual private network (VPN).

Grading Rubric:

Category	Points	Description
Understanding	20	Demonstrate a strong grasp of the problem at hand. Demonstrate understanding of how the course concepts apply to the problem.
Analysis	20	Apply original thought to solving the business problem. Apply concepts from the course material correctly toward solving the business problem.
Execution	10	Write your answer clearly and succinctly using strong organization and proper grammar. Use citations correctly.
Total	50	A quality paper will meet or exceed all of the above requirements.

Note!

Submit your assignment to the Dropbox located on the silver tab at the top of this page. For instructions on how to use the Dropbox

 

 

 

 

<pclass=”block_indent”>Cryptographic Tunneling and the OSI Model

 

Write a paper consisting of 500-1,000 words (double-spaced) on the security effects of cryptographic tunneling based on an understanding of the OSI (Open Systems Interconnect) model (Review the OSI Simulation in the Week 3 Lecture).

Provide input on the type of cryptographic tunneling protocols (e.g., L2TP, IPSEC, SSL, etc.) that may be used, the layer(s) of the OSI at which each operates, and also recommend how they may be implemented. Cryptographic tunneling is inherent in building any common virtual private network (VPN).

View Grading Rubric

Submit your assignment to the Dropbox located on the silver tab at the top of this page. For instructions on how to use the Dropbox, read these step-by-step instructions